Menu ▾ ▴

#6 Nothing going in is being escaped

open
nobody
5
2007-03-14
2007-03-14
Andrew Fenn
No

None of the post and get data going into the scripts is being escaped.

Everything should be escaped before hitting the database.

Discussion


Log in to post a comment.